{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-50331",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-50331"
    }
  },
  "description": "Ivanti Avalanche是Ivanti公司推出的一套企业移动设备管理系统。\n\nIvanti Avalanche存在越界读取漏洞，该漏洞源于Avalanche存在越界读取漏洞，攻击者可利用该漏洞获取内存中的敏感信息。",
  "formalWay": "目前厂商已发布升级程序修复该安全问题，详情见厂商官网:\r\nhttps://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-Multiple-CVEs-Q4-2024-Release",
  "isEvent": "通用软硬件漏洞",
  "number": "CNVD-2026-43374",
  "openTime": "2026-10-30",
  "patchDescription": "Ivanti Avalanche是Ivanti公司推出的一套企业移动设备管理系统。\r\n\r\nIvanti Avalanche存在越界读取漏洞，该漏洞源于Avalanche存在越界读取漏洞，攻击者可利用该漏洞获取内存中的敏感信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。",
  "patchName": "Ivanti Avalanche越界读取漏洞的补丁",
  "products": {
    "product": "Ivanti Ivanti Avalanche <6.4.6"
  },
  "referenceLink": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-Multiple-CVEs-Q4-2024-Release",
  "serverity": "高",
  "submitTime": "2024-11-15",
  "title": "Ivanti Avalanche越界读取漏洞"
}